Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/34352e3136382e31342e302f32342d3234203d3e20323638303335.roa
File:                     34352e3136382e31342e302f32342d3234203d3e20323638303335.roa (raw, json)
Hash identifier:          VDv1OO8TaP5UjMzzAfNlplnlUkaIkBDlUicECtHnP5o=
Subject key identifier:   DA:8F:8E:F5:6A:80:60:51:BE:41:A0:B0:B0:FE:17:B0:85:45:87:6D
Certificate issuer:       /CN=2FB412543B856F996765C01B679EECB97CE613A2
Certificate serial:       3D5B3FAFB23B361CC52DE9F1AA62579469E18EED
Authority key identifier: 2F:B4:12:54:3B:85:6F:99:67:65:C0:1B:67:9E:EC:B9:7C:E6:13:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2FB412543B856F996765C01B679EECB97CE613A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/34352e3136382e31342e302f32342d3234203d3e20323638303335.roa
Signing time:             Tue 20 Dec 2022 11:46:27 +0000
ROA not before:           Tue 20 Dec 2022 11:41:27 +0000
ROA not after:            Tue 19 Dec 2023 11:46:27 +0000
asID:                     268035
IP address blocks:        45.168.14.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:5b:3f:af:b2:3b:36:1c:c5:2d:e9:f1:aa:62:57:94:69:e1:8e:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FB412543B856F996765C01B679EECB97CE613A2
        Validity
            Not Before: Dec 20 11:41:27 2022 GMT
            Not After : Dec 19 11:46:27 2023 GMT
        Subject: CN=DA8F8EF56A806051BE41A0B0B0FE17B08545876D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:48:84:57:e0:1c:91:d3:2d:42:e8:dc:7a:47:
                    bf:cc:b1:78:55:02:17:93:1c:de:67:45:e5:96:df:
                    5a:c0:24:12:95:49:41:58:98:3f:e6:f6:4f:c8:7a:
                    42:07:52:5e:68:55:53:07:05:f2:b1:c8:36:ff:0e:
                    8e:0b:31:35:04:78:02:97:82:48:79:35:cc:9f:1e:
                    5b:00:ce:83:52:95:9b:9c:40:03:96:3a:5f:d8:07:
                    67:61:12:07:12:07:d5:22:15:2a:be:b1:d9:fd:f6:
                    b1:7f:c6:78:25:c3:56:25:1f:b6:89:00:73:42:22:
                    f8:fb:8a:89:46:47:aa:ee:66:6d:21:83:10:12:a7:
                    e4:3f:13:e6:0e:de:44:82:f0:56:ab:99:3a:2a:50:
                    da:89:f9:d2:02:6d:e9:20:58:50:33:4f:dd:8d:90:
                    cf:77:64:6a:c9:0d:7a:79:b5:73:55:97:58:f2:62:
                    ff:01:f7:e1:42:70:1a:9b:22:94:10:6c:b2:34:b4:
                    ad:67:d8:23:32:f9:24:0f:36:11:4f:55:8d:24:c9:
                    22:5a:fe:ef:28:96:54:6c:30:f9:ac:69:ab:1e:0d:
                    cb:01:e8:19:c2:9b:ac:a1:cb:03:11:e0:7d:01:26:
                    29:3a:80:08:70:64:ad:49:71:9d:bd:47:50:93:2b:
                    00:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:8F:8E:F5:6A:80:60:51:BE:41:A0:B0:B0:FE:17:B0:85:45:87:6D
            X509v3 Authority Key Identifier:
                keyid:2F:B4:12:54:3B:85:6F:99:67:65:C0:1B:67:9E:EC:B9:7C:E6:13:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/2FB412543B856F996765C01B679EECB97CE613A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2FB412543B856F996765C01B679EECB97CE613A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/34352e3136382e31342e302f32342d3234203d3e20323638303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:1e:c1:f1:4d:dd:fc:e4:1f:37:4f:8a:b4:3e:50:8a:1d:ce:
         dd:93:26:04:c5:9f:95:cf:ea:b5:8e:21:1f:ac:6f:ea:dd:95:
         be:8c:f2:32:92:90:89:71:7d:34:74:bb:07:3c:31:0e:ff:19:
         c2:bb:f2:cd:96:90:f6:82:b1:87:30:f0:b8:08:b4:80:e1:4c:
         06:47:91:14:eb:3b:f5:3a:5a:58:e9:4c:35:15:a0:d1:7b:e3:
         5f:19:92:ab:64:a8:66:47:9e:b4:8e:6e:59:40:9b:01:c8:e8:
         8f:0d:32:1a:68:1d:84:f6:31:16:a6:b5:ca:71:32:e2:4b:ce:
         47:9d:cd:ea:b2:30:32:c0:25:31:63:e8:1a:32:de:49:09:c4:
         ac:95:3b:37:13:d6:67:61:75:07:5c:75:5c:ae:00:8f:a9:c3:
         c6:48:fb:e7:7f:27:76:da:aa:ad:7a:96:a1:e1:a4:ff:53:66:
         8c:4d:0d:f9:23:0e:c3:88:b9:5b:c2:e8:71:b9:42:19:ee:3e:
         74:91:74:7b:45:dd:8e:10:3f:3c:5d:c9:46:c9:b8:13:21:35:
         f8:68:17:08:58:c1:98:26:1f:7a:fb:3f:96:36:2a:f8:c8:47:
         e8:48:4e:6e:b8:37:f3:18:02:25:87:34:e4:7c:f6:ee:14:14:
         c5:12:20:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:26 2024 by rpki-client on console-ams.rpki-client.org